Method and system for managing user-defined script type baseline items
A management system and management method technology, applied to the management method and system of custom script type baseline projects, security baseline usage scenarios and its implementation fields, can solve the lack of flexibility, cannot meet the needs of advanced users, and cannot meet the inspection height Customized configuration needs and other issues to achieve the effect of strong flexibility and strong customization
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Example Embodiment
[0026] Example 1:
[0027] A management method for custom script type baseline projects, which is based on the security baseline function of Inspur's SSR host security reinforcement system, and provides users with the function of configuring custom security baseline projects on the basis of providing official knowledge base packages , The user adds a custom script type baseline project on the page of the centralized management platform, and the baseline project is sent to the client together with the baseline project provided by the manufacturer, and the client returns the inspection result after the execution is completed.
Example Embodiment
[0028] Example 2
[0029] On the basis of Embodiment 1, the method described in this embodiment includes the following processes:
[0030] The user enters the baseline project of the script type through a special page. The input includes information such as check script, repair script, target value, etc. After the user adds the above information, the system saves the baseline project in the database;
[0031] Before saving to the database, the system calls the command dangerous command identification module, analyzes the scan script and repair script input by the user, determines whether the script input by the user contains offensive or destructive statements, and prompts the user if it exists , And further confirm to the user whether to add; The dangerous command recognition module contains a series of dangerous command patterns, and judges whether each line of the scanning script and the repair script is dangerous and destructive in the form of regular expressions;
[0032] After s...
Example Embodiment
[0034] Example 3
[0035] Such as figure 1 As shown, a management system for a custom script type baseline project, the system uses a front-end page, a centralized management platform, and a client, where:
[0036] The front-end page includes: the add / edit / delete page of the script type baseline item, the log view page, and the client-side inspection results are displayed in a table;
[0037] The centralized management platform includes: dangerous instruction identification module, database operation module (save baseline items in the database or read related data from the database), knowledge base file generation module, and script type knowledge base issuing mechanism;
[0038] The client includes: a script execution module (after the client receives and updates the knowledge base, it executes the script in the knowledge base), a result comparison module, and a log generation module.
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap